Security: Entry-Level-Lucio

Course Content

1. General Security Concepts
(Foundational knowledge and principles)

Compare and contrast various types of security controls.
Summarize fundamental security concepts.
Explain the importance of change management processes and the impact to security.
Explain the importance of using appropriate cryptographic solutions.
Cryptography (basic concepts, history, purpose).
Networking & Protocols (TCP/IP, HTTP/S, DNS, etc.).
Defense in Depth (layered security strategy).
Security Frameworks and CIS Controls (overview of frameworks like NIST, ISO).
Linux Fundamentals (intro to Linux CLI, file systems, permissions).
General Security Concepts – Quiz

2. Threats, Vulnerabilities, and Mitigations
(Identifying risks and addressing them)

Compare and contrast common threat actors and motivations.
Explain common threat vectors and attack surfaces.
Explain various types of vulnerabilities.
Given a scenario, analyze indicators of malicious activity.
Explain the purpose of mitigation techniques used to secure the enterprise.
Malicious Code & Exploit Mitigation (viruses, worms, ransomware).
Vulnerability Scanning and Penetration Testing (tools like Nessus, Metasploit).
Data Loss Prevention (DLP) and Mobile Device Security (mitigating data breaches).
Cryptography Algorithms & Deployment (symmetric/asymmetric encryption, PKI).
Threats, Vulnerabilities, and Mitigations – Quiz

3. Security Architecture
(Designing secure systems and infrastructure)

Compare and contrast security implications of different architecture models.
Given a scenario, apply security principles to secure enterprise infrastructure.
Compare and contrast concepts and strategies to protect data.
Explain the importance of resilience and recovery in security architecture.
Access Control & Password Management (RBAC, MFA, password policies).
Defensible Network Architecture (zero trust, segmentation).
Network Security Devices (firewalls, IDS/IPS, WAFs).
Endpoint Security (EDR, antivirus, hardening).
Virtualization and Cloud Security (shared responsibility model, IAM for cloud).
Container and macOS Security (Docker security, macOS Gatekeeper).
Wireless Network Security (WPA3, rogue AP detection).
Web Communication Security (TLS/SSL, HTTPS).
Windows Security Infrastructure (Active Directory, Group Policy).
Linux Security and Hardening (SELinux, AppArmor, patch management).
Security Architecture – Quiz

4. Security Operations
(Day-to-day monitoring, response, and maintenance)

Given a scenario, apply common security techniques to computing resources.
Explain the security implications of proper hardware, software, and data asset management.
Explain various activities associated with vulnerability management.
Explain security alerting and monitoring concepts and tools.
Given a scenario, modify enterprise capabilities to enhance security.
Given a scenario, implement and maintain identity and access management.
Explain the importance of automation and orchestration related to secure operations.
Explain appropriate incident response activities.
Given a scenario, use data sources to support an investigation.
Log Management & SIEM (Splunk, ELK, alerting).
Incident Handling & Response (NIST lifecycle: preparation → lessons learned).
Enforcing Windows Security Policy (Group Policy, LAPS).
Windows Automation, Auditing, and Forensics (PowerShell, Event Viewer, forensic tools).
Cryptography Application (SSL/TLS implementation, disk encryption).
Web Communication Security (practical HTTPS setup, HSTS).
Security Operations – Quiz

5. Security Program Management and Oversight
(Governance, compliance, and strategy)

Student Ratings & Reviews

No Review Yet

Lucio

Course Content

1. General Security Concepts (Foundational knowledge and principles)

Compare and contrast various types of security controls.

Summarize fundamental security concepts.

Explain the importance of change management processes and the impact to security.

Explain the importance of using appropriate cryptographic solutions.

Cryptography (basic concepts, history, purpose).

Networking & Protocols (TCP/IP, HTTP/S, DNS, etc.).

Defense in Depth (layered security strategy).

Security Frameworks and CIS Controls (overview of frameworks like NIST, ISO).

Linux Fundamentals (intro to Linux CLI, file systems, permissions).

General Security Concepts – Quiz

2. Threats, Vulnerabilities, and Mitigations (Identifying risks and addressing them)

Compare and contrast common threat actors and motivations.

Explain common threat vectors and attack surfaces.

Explain various types of vulnerabilities.

Given a scenario, analyze indicators of malicious activity.

Explain the purpose of mitigation techniques used to secure the enterprise.

Malicious Code & Exploit Mitigation (viruses, worms, ransomware).

Vulnerability Scanning and Penetration Testing (tools like Nessus, Metasploit).

Data Loss Prevention (DLP) and Mobile Device Security (mitigating data breaches).

Cryptography Algorithms & Deployment (symmetric/asymmetric encryption, PKI).

Threats, Vulnerabilities, and Mitigations – Quiz

3. Security Architecture (Designing secure systems and infrastructure)

Compare and contrast security implications of different architecture models.

Given a scenario, apply security principles to secure enterprise infrastructure.

Compare and contrast concepts and strategies to protect data.

Explain the importance of resilience and recovery in security architecture.

Access Control & Password Management (RBAC, MFA, password policies).

Defensible Network Architecture (zero trust, segmentation).

Network Security Devices (firewalls, IDS/IPS, WAFs).

Endpoint Security (EDR, antivirus, hardening).

Virtualization and Cloud Security (shared responsibility model, IAM for cloud).

Container and macOS Security (Docker security, macOS Gatekeeper).

Wireless Network Security (WPA3, rogue AP detection).

Web Communication Security (TLS/SSL, HTTPS).

Windows Security Infrastructure (Active Directory, Group Policy).

Linux Security and Hardening (SELinux, AppArmor, patch management).

Security Architecture – Quiz

4. Security Operations (Day-to-day monitoring, response, and maintenance)

Given a scenario, apply common security techniques to computing resources.

Explain the security implications of proper hardware, software, and data asset management.

Explain various activities associated with vulnerability management.

Explain security alerting and monitoring concepts and tools.

Given a scenario, modify enterprise capabilities to enhance security.

Given a scenario, implement and maintain identity and access management.

Explain the importance of automation and orchestration related to secure operations.

Explain appropriate incident response activities.

Given a scenario, use data sources to support an investigation.

Log Management & SIEM (Splunk, ELK, alerting).

Incident Handling & Response (NIST lifecycle: preparation → lessons learned).

Enforcing Windows Security Policy (Group Policy, LAPS).

Windows Automation, Auditing, and Forensics (PowerShell, Event Viewer, forensic tools).

Cryptography Application (SSL/TLS implementation, disk encryption).

Web Communication Security (practical HTTPS setup, HSTS).

Security Operations – Quiz

5. Security Program Management and Oversight (Governance, compliance, and strategy)

Security Governance & Compliance

Risk Management

Security Frameworks & Controls

Windows Security Management

Human-Centric Security

Security Program Management and Oversight – Quiz

Student Ratings & Reviews

FOLLOW ME

1. General Security Concepts
(Foundational knowledge and principles)

2. Threats, Vulnerabilities, and Mitigations
(Identifying risks and addressing them)

3. Security Architecture
(Designing secure systems and infrastructure)

4. Security Operations
(Day-to-day monitoring, response, and maintenance)

5. Security Program Management and Oversight
(Governance, compliance, and strategy)